CVE-2011-3686

Multiple cross-site scripting XSS vulnerabilities in myAddressBook.asp in Sonexis ConferenceManager 9.2.11.0 and 9.3.14.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, 3 emailedit, 4 email, 5 email2, 6 email3, 7 sms, 8 smsid, or 9 work parameter...

ServersCheck Monitoring Software 8.8.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/49793/info ServersCheck Monitoring Software is prone to multiple remote input-validation vulnerabilities, including: 1. Multiple HTML-injection vulnerabilities 2. Multiple cross-site scripting vulnerabilities 3. A cross-site request forgery vulnerability ...

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...

Variant of SpyEye Targets Android Devices

Researchers at security firm Trusteer claim a new version of the SpyEye Trojan horse program that targets mobile banking users with Android mobile phones and intercepts SMS text messages to and from the phone. However, significant obstacles may prevent it from spreading. Writing on the company’s...

Trojaned Dog Fight App Strikes Blow for Animal Rights

Researchers at Symantec discovered that an outdated version of a controversial Android app called ‘Dog Wars’ is infected with a trojan apparently placed by animal rights activists offended by the game’s premise. ‘Dog Wars’ is a beta-phase Android based mobile game in which players raise virtual...

Android Malware Found Stealing Texts, Intercepting Calls

The steady drumbeat of malware and spyware targeting the Android platform is continuing, this time with the emergence of a new variant of an Android Trojan that masquerades as a Google+ app and has the ability to not only record phone calls, but also to answer incoming calls and respond to remote...

Freenet SMS Service - Persistent Web Vulnerability

Document Title: =============== Freenet SMS Service - Persistent Web Vulnerability Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 123 Abstract Advisory Information: ============================== An anonymous laboratory researcher...

Freenet SMS Service - Persistent Web Vulnerability

Document Title: =============== Freenet SMS Service - Persistent Web Vulnerability Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 123 Abstract Advisory Information: ============================== An anonymous laboratory researcher...

War Texting : Hackers Unlock Car Doors Via SMS

War Texting : Hackers Unlock Car Doors Via SMS Don Bailey and Mathew Solnik, Two hackers have found a way to unlock cars that use remote control and telemetry systems like BMW Assist, GM OnStar, Ford Sync, and Hyundai Blue Link. These systems communicate with the automaker's remote servers via...

Google Enables Gmail Two-Factor Security in 150 Countries

Nearly six months after first introducing two-step verification for its Gmail service, Google has expanded the security feature to users outside the English-speaking world, opening it up to people in more than 150 countries. The company said on Thursday that it has enabled the two-step verificati...

New SMS Trojan Targeting Android Users

The Apple iPhone may still be the gold standard when it comes to smartphones, but the Android platform has become the playground of choice for attackers and malware authors looking to make a quick buck. The latest example is a premium-rate SMS Trojan that not only automatically sends costly SMS...

viaExtract - Forensic tool for Android devices released

viaExtract - Forensic tool for Android devices released Android Forensics is now easier, faster and more powerful than ever. viaForensics has released viaExtract – Android Logical, a powerful analysis and reporting tool for Android smart phones and devices.Expanding on our popular AFLogical...

viaExtract - Forensic tool for Android devices released

viaExtract - Forensic tool for Android devices released Android Forensics is now easier, faster and more powerful than ever. viaForensics has released viaExtract – Android Logical, a powerful analysis and reporting tool for Android smart phones and devices.Expanding on our popular AFLogical...

HTC HD2 Mobile Phone - LockScreen Keyboard Bypass

Document Title: =============== HTC HD2 Mobile Phone - LockScreen Keyboard Bypass References: =========== View: http://www.youtube.com/watch?v=84Lf27GrLa4 Download: http://www.vulnerability-lab.com/resources/videos/214.flv Release Date: ============= 2011-06-30 Vulnerability Laboratory ID VL-ID:...

HTC HD2 Mobile Phone - LockScreen Keyboard Bypass

Document Title: =============== HTC HD2 Mobile Phone - LockScreen Keyboard Bypass References: =========== View: http://www.youtube.com/watch?v=84Lf27GrLa4 Download: http://www.vulnerability-lab.com/resources/videos/214.flv Release Date: ============= 2011-06-30 Vulnerability Laboratory ID VL-ID:...

Wireshark 1.4.7 & Wireshark 1.2.17 Released

Wireshark 1.4.7 & Wireshark 1.2.17 Released Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education.This update fixes many bugs. Supports for the following protocols have been updated – BSSMAP, DMP, GSM SMS, LDSS, NCP,...

Mobile Devices Key To Facebook's New Log-In Approval Feature

Facebook is implementing a new opt-in, two-factor verification security feature they are calling log-in approval. The new feature will require users to enter a unique, one time code, which Facebook will send via SMS whenever a user tries to access his or her account from a new and/or unrecognized...

SMS Trojan Found in Several Android Apps

Google has removed a group of mobile phone applications from its Android Market after it was discovered that the applications contained code that could be used to send SMS Short Message Service spam. Google’s action came after a security firm in Taiwan published a security alert about the apps on...

The Underground Economy: SMS Fraud

The underground malware economy has expanded and diversified in recent years and the latest frontier is the mobile platform. In this video, Kaspersky Lab’s Denis Maslennikov talks about the ways that attackers use premium-rate SMS messages and banking fraud to bilk users...